path disclosure

tbl_properties.inc.php3

@@ -2,6 +2,14 @@
 /* $Id$ */
 // vim: expandtab sw=4 ts=4 sts=4:
 
+// Check parameters
+
+if (!defined('PMA_COMMON_LIB_INCLUDED')) {
+    include('./libraries/common.lib.php3');
+}
+
+PMA_checkParameters(array('db','table','action','num_fields'));
+
 
 // Get available character sets (MySQL >= 4.1)
 if (PMA_MYSQL_INT_VERSION >= 40100 && !defined('PMA_MYSQL_CHARSETS_LIB_INCLUDED')) {

tbl_properties_common.php3

@@ -16,6 +16,8 @@ if (!defined('PMA_BOOKMARK_LIB_INCLUDED')) {
     include('./libraries/bookmark.lib.php3');
 }
 
+// Check parameters
+PMA_checkParameters(array('db','table'));
 
 /**
  * Defines the urls to return to in case of error in a sql statement

tbl_properties_links.php3

@@ -9,6 +9,14 @@
 error_reporting(E_ALL);
 
 
+// Check parameters
+
+if (!defined('PMA_COMMON_LIB_INCLUDED')) {
+    include('./libraries/common.lib.php3');
+}
+
+PMA_checkParameters(array('db'));
+
 /**
  * Count amount of navigation tabs
  */

tbl_properties_table_info.php3

@@ -5,6 +5,14 @@
 // this should be recoded as functions, to avoid messing with global
 // variables
 
+// Check parameters
+
+if (!defined('PMA_COMMON_LIB_INCLUDED')) {
+    include('./libraries/common.lib.php3');
+}
+
+PMA_checkParameters(array('db', 'table', 'err_url_0'));
+
 /**
  * Gets table informations
  */